CVE-2003-1521

Currently unrated

Key Information:

Vendor
Oracle
Status
Java Plug-in
Vendor
CVE Published:
31 December 2003

Summary

Sun Java Plug-In 1.4 through 1.4.2_02 allows remote attackers to repeatedly access the floppy drive via the createXmlDocument method in the org.apache.crimson.tree.XmlDocument class, which violates the Java security model.

References

http://www.securityfocus.com/bid/8867
vdb-entryx_refsource_BID
http://www.securityfocus.com/archive/1/341943
mailing-listx_refsource_BUGTRAQ

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.